what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 13 of 13

Files from R. Gregory

gShield-2.7.tgz

Posted Jul 10, 2001

Authored by R. Gregory | Site muse.linuxmafia.org

Shield is an aggressive, modular firewall script for iptables which features easy configuration through a BSD-style configuration file, optional NAT support, TCP-wrapper-like functionality for service access, port forwarding, routable protection, DMZ support, and more.

Changes: Misc. routable typos have been fixed, gforward has been updated, and generic internal forwarding support and portscan detection have been added.

tags | tool, tcp, firewall

systems | linux, bsd

SHA-256 | 83683fafd85b8a27bb7238d7fa29c103a9d95820bb3c08c55d2b5d64fa0877c5

Download | Favorite | View

gShield-2.5.tgz

Posted Apr 30, 2001

Authored by R. Gregory | Site muse.linuxmafia.org

Shield is an aggressive, modular firewall script for iptables which features easy configuration through a BSD-style configuration file, optional NAT support, TCP-wrapper-like functionality for service access, port forwarding, routable protection, DMZ support, and more.

Changes: Options added for icmp_broadcast and tcp_timestamps, syncookies are now disabled by default, bugfix for oversight in run-time options, and updated documentation.

tags | tool, tcp, firewall

systems | linux, bsd

SHA-256 | 0a38e59e90db7c5ef66dd88ffecd7724876d5577f69462f9c8027f2b0b9613fe

Download | Favorite | View

gShield-2.4.tgz

Posted Apr 25, 2001

Authored by R. Gregory | Site muse.linuxmafia.org

Shield is an aggressive, modular firewall script for iptables which features easy configuration through a BSD-style configuration file, optional NAT support, TCP-wrapper-like functionality for service access, port forwarding, routable protection, DMZ support, and more.

Changes: Several run-time options added: gShield can now add clienthosts, highport access clients and blacklisted clients directly to the current ruleset and the permanent configuration. Security warnings added for recent FTP/RELATED issue, NOLOG now quietly drops broadcasts automatically, some kernel-specific ip-sysctl options are now configurable via gShield.conf (including ECN), documentation updated for new run-time options.

tags | tool, tcp, firewall

systems | linux, bsd

SHA-256 | 6e0b151af609001d14d4d8c76be5d1c72f2dfd20baa39f8b89a53cd1c49026f0

Download | Favorite | View

gShield-2.3.tgz

Posted Apr 15, 2001

Authored by R. Gregory | Site muse.linuxmafia.org

Shield is an aggressive, modular firewall script for iptables which features easy configuration through a BSD-style configuration file, optional NAT support, TCP-wrapper-like functionality for service access, port forwarding, routable protection, DMZ support, and more.

Changes: Change for this release include: ifconfig now defined as a variable, reordered the blacklist/NAT chain ordering, folded in multi-homed logic, fixed typos (including one affecting HTTPS), and added misc comment updates.

tags | tool, tcp, firewall

systems | linux, bsd

SHA-256 | 95a856340d6fa4f4a8559f3a3027602a3341338eb3c89b254620297464326391

Download | Favorite | View

gShield-2.2.tgz

Posted Apr 7, 2001

Authored by R. Gregory | Site muse.linuxmafia.org

Shield is an aggressive, modular firewall script for iptables which features easy configuration through a BSD-style configuration file, optional NAT support, TCP-wrapper-like functionality for service access, port forwarding, routable protection, DMZ support, and more.

Changes: This releases tones down startup verbosity, adds support for forwarding IMAP-SSL, adds configurable behavior when dropping packets, and includes miscellaneous cleanups.

tags | tool, tcp, firewall

systems | linux, bsd

SHA-256 | 080518f1c19f5745b7b4fa57ff521d1b4ec5a79b6a1b8f7afc8da160f31e7a8c

Download | Favorite | View

gShield-2.0.4.tgz

Posted Mar 29, 2001

Authored by R. Gregory | Site muse.linuxmafia.org

Shield is an aggressive, modular firewall script for iptables which features easy configuration through a BSD-style configuration file, optional NAT support, TCP-wrapper-like functionality for service access, port forwarding, routable protection, DMZ support, and more.

Changes: There is now a traceroute toggle, the log-level is configurable, the CLOSED chain has been reordered, a "flush" option has been added, additional IANA reserved blocks have been folded in, and there is a miscellaneous cleanup.

tags | tool, tcp, firewall

systems | linux, bsd

SHA-256 | 6d4a00b5e40e1eb59e715669495cadfbb7e6c628667039d2b0c2913871df7bca

Download | Favorite | View

gShield-2.0.2.tgz

Posted Jan 25, 2001

Authored by R. Gregory | Site muse.linuxmafia.org

Shield is an aggressive, modular firewall script for iptables which features easy configuration through a BSD-style configuration file, optional NAT support, TCP-wrapper-like functionality for service access, port forwarding, routable protection, DMZ support, and more.

Changes: This release has misc. cleanup and removal of misc. redundant entries. Logging options for reserved drops and dhcp have been added/enhanced. Full highport access is now a toggle. Transparent-proxy options, fixes for passive ftp, and options for bind/domain forwarding have been added. Services now use getservent to determine port selection. misc cleanup.

tags | tool, tcp, firewall

systems | linux, bsd

SHA-256 | d1d66087d42bbe78e58dfc2706c55877360b205e67d34778767cb20095d963ad

Download | Favorite | View

gShield-2.0.1.tgz

Posted Jan 15, 2001

Authored by R. Gregory | Site muse.linuxmafia.org

Shield is an aggressive, modular firewall script for iptables which features easy configuration through a BSD-style configuration file, optional NAT support, TCP-wrapper-like functionality for service access, port forwarding, routable protection, DMZ support, and more.

Changes: Additional chains for output readability, cleanups to the logging output, no longer logging SMB broadcasts, and an option for easily adding user-defined open ports.

tags | tool, tcp, firewall

systems | linux, bsd

SHA-256 | a0b6735130be9b6d3527a383069ed0ef2880ba9ec6412143c544b42fea657693

Download | Favorite | View

gShield-2.0.0.tgz

Posted Jan 10, 2001

Authored by R. Gregory | Site muse.linuxmafia.org

Shield is an aggressive, modular firewall script for iptables which features easy configuration through a BSD-style configuration file, optional NAT support, TCP-wrapper-like functionality for service access, port forwarding, routable protection, DMZ support, and more.

Changes: Conversion to iptables, adding support for multiple NATs, support for routable addresses and protection, DMZ support, integrated port-forwarding, MAC-specific filtering for administrative hosts, and stateful tracking has been added.

tags | tool, tcp, firewall

systems | linux, bsd

SHA-256 | 24a084a5ba0a63cec04ba9426739838db24cac2e63ad1dc170ad28bf35038bb2

Download | Favorite | View

gShield-1.5.4.tar.gz

Posted Mar 13, 2000

Authored by R. Gregory | Site linuxmafia.org

gShield is an aggressive, modular, ipchains-based firewall script. Features include: easy configuration through a BSD-style configuration file, optional IPmasq support, TCP-wrapper-like funtionality for service access, and extremely restrictive defaults. It hopes to make administrating a comprehensive firewall easier, as well as offering robust protection while being easy to setup/maintain.

Changes: Increased MASQ timeout for ICQ. Port-forwarding section can now accomodate not using ipmasqadm. Added DNS entries. Logs directly via logger. Forwarding now seperate from MASQ, Added auto-detection of interface status. BIND/imapd added to port-forwarding services.

tags | tool, tcp, firewall

systems | linux, bsd

SHA-256 | 5d4d808f0ef5cac8c9579ce9b1b842222cd9999786e88aea26247088404d1885

Download | Favorite | View

gShield-1.5.1.tar.gz

Posted Feb 22, 2000

Authored by R. Gregory | Site linuxmafia.org

gShield is an aggressive, modular, ipchains-based firewall script. Features include: easy configuration through a BSD-style configuration file, optional IPmasq support, TCP-wrapper-like funtionality for service access, and extremely restrictive defaults. It hopes to make administrating a comprehensive firewall easier, as well as offering robust protection while being easy to setup/maintain.

Changes: A serious typographical error was fixed in ipmasqadm. Outgoing blocks for non-routable source addresses were added, and a check to ensure ip-forwarding is disabled unless specifically enabled was added as well.

tags | tool, tcp, firewall

systems | linux, bsd

SHA-256 | fbc08b39256eb98ccb1d4e8048814726a13e47cee451f9b552afa142e7db97b6

Download | Favorite | View

gShield-1.3.tgz

Posted Jan 10, 2000

Authored by R. Gregory | Site linuxmafia.org

gShield (formerly Godot's Modified Modular Firewall), is an aggressive, modular, ipchains-based firewall script. Features include: easy configuration through a BSD-style configuration file, optional IPmasq support, TCPwrapper-like funtionality for service access, and extremely restrictive defaults. It hopes to make administrating a comprehensive firewall easier, as well as offering robust protection.

Changes: Various typo fixes, an option to drop traceroutes, a safety option to ensure remote X connections are dropped, various ip_masq_mod tweaks, fixes for POP3 errors, fixes for incorrect cable DHCP port designations, and readdition of various winclient trojan protection.

tags | tool, firewall

systems | linux, bsd

SHA-256 | 2b2b2f05385266ea208312a5a7ef5622705f625a29c02d2dc8a2f145be1702a1

Download | Favorite | View

gShield-1.0.tgz

Posted Dec 9, 1999

Authored by R. Gregory | Site muse.linuxgeek.org

gShield (formerly Godot's Modified Modular Firewall), is an aggressive, modular, ipchains-based firewall script. Features include: easy configuration through a BSD-style configuration file, optional IPmasq support, TCPwrapper-like funtionality for service access, and extremely restrictive defaults. It hopes to make administrating a comprehensive firewall easier, as well as offering robust protection.

Changes: The name has been changed to gShield (from GMMF), configuration is now BSD-style, the code has been cleaned up, and security enhancements have been made.

tags | tool, firewall

systems | linux, bsd

SHA-256 | b66f429eb7acca7775aad24bbd2a9a705b6271956c2b294a6c82d732cd9400b5

Download | Favorite | View